Update Lock version and changelog URL

Author: joshcanhelp

CHANGELOG.md

@@ -7,7 +7,7 @@
 
 - The "Single Sign-On" setting has been deprecated and will be removed in the next major release. This setting is used to attempt SSO on the `wp-login.php`. To use SSO going forward, please activate the "Universal Login Page" setting in the **Features** tab of the plugin settings. If you are already using the Universal Login Page on your site then expect no changes in functionality.
 - The "Single Logout" functionality has been changed. This setting now logs users out of Auth0 automatically when they log out of WordPress. It no longer logs users out of WordPress automatically if they have already been logged out of Auth0.
-- The default Lock version has been updated from 11.5 to 11.14. If you have never changed the Lock URL, this update will be automatic for this and future releases. If you have updated the Lock URL in the past, your custom URL has been retained. We recommend using the latest tested version of Lock, which can be done by turning the "Use Custom Lock JS URL" option off on the **Advanced** tab of the plugin settings. Please see the [Lock changelog](https://github.com/auth0/lock/blob/master/CHANGELOG.md#v1160-2018-04-24) (v11.6.0 to v11.14.1) for information on changes to the embedded login form.
+- The default Lock version has been updated from 11.5 to 11.15. If you have never changed the Lock URL, this update will be automatic for this and future releases. If you have updated the Lock URL in the past, your custom URL has been retained. We recommend using the latest tested version of Lock, which can be done by turning the "Use Custom Lock JS URL" option off on the **Advanced** tab of the plugin settings. Please see the [Lock changelog](https://github.com/auth0/lock/blob/master/CHANGELOG.md) (v11.6.0 to v11.15.0) for information on changes to the embedded login form.
 - Core WordPress login form display handling has been changed to improve security and maintainability. Please review the "Original Login Form on wp-login.php" option on the **Basic** tab of the plugin settings to make sure this is set properly for your site.
 - Site administrators can now rotate the migration token in the **Advanced** tab of the plugin settings. This change will occur right after confirmation and must be updated in the database Connection immediately. Please see our [documentation page on User Migration](https://auth0.com/docs/cms/wordpress/user-migration) for more information about configuring and troubleshooting this feature.
 - The "API Token" field in the **Basic** tab of the plugin settings has been removed. All Management API functionality now uses a Client Credentials grant, which is set up automatically when you run the Setup Wizard. The only scopes required for the plugin are now `read:users` and `update:users`. Configuration steps for this can be found [here](https://auth0.com/docs/cms/wordpress/configuration#authorize-the-application-for-the-management-api) but if your site is already working as expected currently then no action is required for this update.